AWS Cloud, IAM, CDK & DevOps Engineer

The AWS Cloud, IAM, CDK & DevOps Engineer will design, implement, automate, and support the AWS cloud foundation for the PSO platform.

The role will own AWS environment architecture, IAM and identity controls, reusable AWS CDK infrastructure, CI/CD enablement, observability, resilience, security, and production readiness across development, test, and production environments., AWS Cloud Infrastructure & Architecture

• Design, implement, and support secure AWS infrastructure across development, test, and production environments.
• Implement cloud networking, secrets management, encryption, logging, monitoring, alerting, backup, recovery, and resiliency controls.
• Support enterprise AWS environments and production operations.
• Create cloud architecture diagrams, implementation plans, technical standards, test evidence, and production-readiness documentation.

Identity & Access Management (IAM)

• Define and manage IAM roles, policies, service accounts, identity federation, permission boundaries, and least-privilege access controls.
• Implement and support Amazon Cognito authentication and application integration patterns where required.
• Establish IAM, authentication, authorization, and access-control standards.

Infrastructure as Code (AWS CDK)

• Develop and maintain reusable infrastructure-as-code constructs, stacks, and deployment patterns using AWS CDK.
• Define reusable CDK constructs, deployment standards, account structures, and environment guardrails.
• Automate environment provisioning, configuration, validation, promotion, rollback, and release processes.

DevOps & CI/CD Automation

• Build and support CI/CD pipelines for infrastructure and application deployments through approved DevOps and GitHub workflows.
• Automate infrastructure deployment and release processes.
• Support Git-based deployment workflows and related DevOps tooling.
• Implement and maintain automated infrastructure provisioning and deployment workflows.

Operations, Security & Reliability

• Implement monitoring, logging, alerting, backup, recovery, and resiliency procedures.
• Support containerized or serverless AWS workloads and automated operational monitoring.
• Partner with developers, architects, security teams, and vendors to resolve integration, access, deployment, and performance issues.
• Provide troubleshooting, knowledge transfer, operating procedures, support runbooks, and post-deployment stabilization support.
• Ensure security, operational readiness, and production deployment requirements are addressed., Expected Deliverables
• Documented AWS cloud, identity, CDK, and DevOps architecture.
• Configured development, test, and production cloud environments.
• Reusable AWS CDK constructs, stacks, and deployment templates.
• IAM, authentication, authorization, and access-control standards.
• CI/CD pipelines and automated infrastructure deployment workflows.
• Monitoring, logging, alerting, backup, recovery, and resiliency procedures.
• Security, operational readiness, and deployment evidence.
• Technical documentation, knowledge transfer, and support runbooks.

Role Focus

Secure AWS foundations, IAM governance, reusable AWS CDK automation, DevOps pipelines, operational resilience, and production readiness.

Cloud Computing, Amazon Web Services (AWS), Software Engineering, DevOps, Market Analysis, Project Evaluation, Cloud Computing, Amazon Web Services (AWS), DevOps, Forecasting, * Five or more years of hands-on AWS cloud engineering or DevOps experience.

• Strong experience with AWS IAM, authentication, authorization, identity federation, and least-privilege design.
• Hands-on experience developing and deploying infrastructure using AWS CDK.
• Experience building or supporting CI/CD pipelines and Git-based deployment workflows.
• Experience supporting enterprise AWS environments and production operations.
• Knowledge of AWS networking, secrets management, encryption, observability, backup, recovery, and resiliency.
• Experience with scripting or automation using Python, TypeScript, JavaScript, Bash, or comparable technologies.
• Strong documentation, troubleshooting, communication, and stakeholder collaboration skills.

Preferred Qualifications

• Experience with GitHub, GitHub Actions, AWS CodePipeline, AWS CodeBuild, or comparable DevOps tooling.
• Experience defining reusable CDK constructs, deployment standards, account structures, and environment guardrails.
• Experience supporting containerized or serverless AWS workloads and automated operational monitoring.
• Experience supporting energy trading, power market analytics, utility operations, renewable energy, or forecasting platforms.
• Familiarity with North American ISO/RTO markets, including ERCOT, PJM, MISO, SPP, CAISO, NYISO, or ISO-NE.
• Experience in regulated, cybersecurity-sensitive, or compliance-driven environments.
• Relevant AWS certification is a plus.